Chat now with support
Chat with Support

NetVault 13.0.2 - Administration Guide for Managed Service Providers

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices
About storage devices SAN considerations Quest DR Series systems Quest QoreStor NetVault SmartDisk EMC Data Domain Systems Snapshot Array Manager Virtual Tape Libraries Virtual standalone drives Shared Virtual Tape Libraries Physical tape devices Storage tiers
Backing up data Managing policies Restoring data Managing NetVault dashboard Managing jobs Monitoring logs Managing storage devices
Role-based access to manage storage devices Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Managing Tenant Monitoring events and configuring notifications Reporting in NetVault Working with client clusters Configuring default settings for NetVault
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring the reporting utility Configuring NetVault WebUI default settings Configuring NetVault to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault processes Environment variables Network ports used by NetVault Troubleshooting
Common errors Safe Mode in NetVault

Firewall filtering rules

When creating firewall rules on the server and client machines, make sure that you open the following ports to send and receive traffic from NetVault.

 
* 
IMPORTANT: MSP administrator can create Server to Client firewall rules and Tenant administrator can create Client to Server firewall rules.
 
Table 19. Firewall filtering rules
From
To
TCP/UDP
Source port
Destination port

Server

Client

TCP

Connect ports for inter-machine connection setup specified on the NetVault Server

20031

Client

Server

TCP

Connect ports for inter-machine connection setup specified on the NetVault Clients

20031

Server

Client

TCP

Connect ports for message channels specified on NetVault Server

Listen Ports for Message Channels specified on the NetVault Clients

Client

Server

TCP

Listen ports for message channels specified on the NetVault Clients

Connect Ports for Message Channels specified on the NetVault Server

Server

Client

UDP

20031

20031

Client

Server

UDP

20031

20031

Server

Client

TCP

Listen ports for devices specified on the NetVault Server and Clients

Connect ports for devices specified on the NetVault Clients

Client

Server

TCP

Connect ports for devices specified on NetVault Clients

Listen ports for devices specified on NetVault Server and Clients

Firewall configuration example

This example illustrates the network port requirements for a NetVault system with the following configuration:

•
Number of drives: 6
•
Number of clients with one plug-in: 10
•
Number of clients with two plug-ins: 2
 
Table 20. Example: Port requirement calculation
NetVault machine
Port type
Requirement
Total ports
Example port range

Server (with locally attached storage device)

Connect ports for inter‑machine connection setup

Minimum two ports per client

24

50300-50323

Connect ports for NetVault message channels

Minimum three ports per client

40

50200-50239

Listen ports for devices

Minimum two ports per drive

12

50100-50111

Client

Connect ports for inter‑machine connection setup

Minimum two ports per client

(These ports can be the same as the ports specified on the server side.)

24

50300-50323

Listen ports for NetVault message channels

Minimum three ports per client

40

50500-50539

Connect ports for devices

Minimum two ports per drive

12

50400-50411

The following table illustrates the firewall filtering rules for this system.

 
Table 21. Example: Firewall filtering rules
From
To
TCP/UDP
Source port
Destination port

Server

Client

TCP

50300-50323

20031

Client

Server

TCP

50300-50323

20031

Server

Client

TCP

50200-50237

50500-50537

Client

Server

TCP

50500-50537

50200-50237

Server

Client

UDP

20031

20031

Client

Server

UDP

20031

20031

Server

Client

TCP

50100-50111

50400-50411

Client

Server

TCP

50400-50411

50100-50111

Locating a client

The clients that reside in a different subnet are not included in the list of available clients. You can use the Find Machine option to locate and add such clients.

To locate and add a client that is not discovered automatically:
1
Start the client addition wizard, and then click Find Machine.
2
On the Find Client page, type the Fully Qualified Domain Name (FQDN) or IP address of the client, and click Find.
3
After the machine is located, complete Step 2 through Step 5 in the section Adding a client to the NetVault Server.
 
* 
NOTE: NetVault reports an error if it fails to locate the specified client on the network. An error can occur for reasons such as the following:
•
The NetVault software is not installed on the machine.
•
The NetVault Service is not running on the machine.
•
The DNS lookup table or the machine’s host table cannot be contacted.

Checking communication through a firewall

When adding a client that resides outside the firewall, you can perform a firewall test to check if the server and client can communicate through the firewall. You can also perform this test to check connectivity for existing clients.

To check if the server and client can communicate through a firewall:
1
To check connectivity for new clients, start the client addition wizard, and then click Firewall Test.
— or —
To check connectivity for existing clients, open the Manage Clients page. Select the client, and then click Firewall Test.
2
In the Check Connection dialog box, provide the following details.
 
Table 22. Check connection
Option
Description

NetVault Client Name

For new clients, type the NetVault name of the machine.

For existing clients, the name is displayed as a read-only property.

NetVault Client Address

For new clients, type the IP address of the machine.

For existing clients, the IP address is displayed as a read-only property.

UDP Port

The default UDP port for NetVault. It is set to 20031. If you have configured NetVault to use a different port, change this value.

TCP Port

The default UDP port for NetVault. It is set to 20031. If you have configured NetVault to use a different port, change this value.

Timeout

The timeout interval is set to 15 seconds by default.

3
Click Test. This command checks if TCP, UDP, and messaging connectivity is available between the server and client, and displays the result in the dialog box.
 
* 
IMPORTANT: The firewall test option checks the connectivity to the Stats Manager process on the specified server or client machine. If this process is not running on the client, the test fails. However, the client may still be accessible for backup. In any case, it is an abnormal situation and should be corrected.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating